Collage Maker Pro - Quick Grid - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Collage Maker Pro - Quick Grid published at the 'play' market has multiple vulnerabilities...

Square Quick Pro-No Crop Photo - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Square Quick Pro-No Crop Photo published at the 'play' market has multiple vulnerabilities...

Floatify - Quick Replies - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Floatify - Quick Replies published at the 'play' market has multiple vulnerabilities...

Quick App Launch★CocoPPa Pot - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Quick App Launch★CocoPPa Pot published at the 'play' market has multiple vulnerabilities...

Quick LabRef - GPL license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Quick LabRef published at the 'play' market has multiple vulnerabilities...

Quick Dialer. - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Quick Dialer. published at the 'play' market has multiple vulnerabilities...

Quick Tftp Server Pro 2.3 - Read Mode Denial of Service

Exploit for windows platform in category dos / poc Exploit Title: Quick Tftp Server Pro 2.3 TFTP mode Remote Overflow DoS Date: 21/01/2016 Exploit Author: Guillaume Kaddouch Twitter: @gkweb76 Blog: https://networkfilter.blogspot.com GitHub: https://github.com/gkweb76/exploits Vendor Homepage:...

Quick Tftp Server Pro 2.3 - Read Mode Denial of Service

Exploit Title: Quick Tftp Server Pro 2.3 TFTP mode Remote Overflow DoS Date: 21/01/2016 Exploit Author: Guillaume Kaddouch Twitter: @gkweb76 Blog: https://networkfilter.blogspot.com GitHub: https://github.com/gkweb76/exploits Vendor Homepage: http://www.tallsoft.com/tftpserver.htm Software Link:...

Apache 2.4.7 + PHP 7.0.2 - 'openssl_seal()' Uninitialized Memory Code Execution

?php // Source: http://akat1.pl/?id=1 function getmaps $fh = fopen"/proc/self/maps", "r"; $maps = fread$fh, 331337; fclose$fh; return explode"\n", $maps; function findmap$sym $addr = 0; foreachgetmaps as $record if strstr$record, $sym && strstr$record, "r-xp" $addr = hexdecexplode'-', $record0;...

Quick CMS 6.1 Cross Site Request Forgery / Cross Site Scripting

-------------------------- - Exploit Title : Quick CMS CSRF/XSS - Vendor Homepage: http://opensolution.org - Software Link: - http://opensolution.org/download/home.html?sFile=Quick.Cmsv6.1-en.zip - Version : 6.1 - Date: 2016-21-01 - Tested On : Windows 7 / FireFox -------------------------- -...

Oracle Outside In 8.5.2 contains multiple stack buffer overflows

Overview Oracle Outside In versions 8.5.2 and earlier contain stack buffer overflow vulnerabilities in the parsers for WK4, Doc, and Paradox DB files, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Oracle Outside In is a set of...

Quick CMS 6.1 Cross Site Scripting

FULL DISCLOSURE Product : Quick CMS Exploit Author : Rahul Pratap Singh Version : 6.1 Home page Link : http://opensolution.org/home.html Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 19/Jan/2016 XSS Vulnerability:...

UBUNTU-CVE-2016-1922

QEMU aka Quick Emulator built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'currentcpu' remains null, which leads to the null pointer dereference. A user or...

Emerson ControlWave® Micro Quick 弱口令

参考链接: http://www.documentation.emersonprocess.com/groups/public/documents/usersguide/d301425x012.pdf...

CVE-2015-8743

QEMU aka Quick Emulator built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing 'ioport' r/w operations. A privileged CAPSYSRAWIO user/process could use this flaw to leak or corrupt QEMU memory bytes...

Domi-Owned - Tool Used for Compromising IBM/Lotus Domino Servers

Domi-Owned is a tool used for compromising IBM/Lotus Domino servers. Tested on IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0, and 9.0.1 running on Windows and Linux. Usage A valid username and password is not required unless 'names.nsf' and/or 'webadmin.nsf' requires authentication. Fingerprinting Running...

WordPress < 3.7.9 / 3.8.x < 3.8.9 / 3.9.x < 3.9.7 / 4.1.x < 4.1.6 / 4.2.x < 4.2.3 Multiple Vulnerabilities

Binary data 9030.prm...

Pyersinia - Network Attack Tool

Pyersinia is a similar tool to Yersinia, but Pyersinia is implemented in Python using Scapy. The main objective is the realization of network attacks such as spoofing ARP, DHCP DoS , STP DoS among others. The community can add new attacks on the tool in a simple way, using plugins. This is becaus...

MASM32 11R - Crash (PoC)

MASM32 11R - Crash PoC EXPLOIT TITLE: Masm32v11r Buffer OverflowSEH overwrite crash POC AUTHOR: VIKRAMADITYA "-OPTIMUS" Date of Testing: 22nd September 2015 Download Link : http://www.masm32.com/masmdl.htm Tested On : Windows 10 Steps to Crash :- Step 1: Execute this python script Step 2: This...

MASM32 11R - Crash POC Exploit

Exploit for windows platform in category dos / poc EXPLOIT TITLE: Masm32v11r Buffer OverflowSEH overwrite crash POC AUTHOR: VIKRAMADITYA "-OPTIMUS" Date of Testing: 22nd September 2015 Download Link : http://www.masm32.com/masmdl.htm Tested On : Windows 10 Steps to Crash :- Step 1: Execute this...